Rustdesk

**Name of the Vulnerable Software and Affected Versions** RustDesk versions prior to 1.5.0 **Description** On Windows, the software fails to enforce the one-way file transfer option when handling peer clipboard file requests. This allows authenticated peers to read files from the host clipboard by sending `FormatDataRequest` and `FileContentsRequest` messages and guessing the `FileGroupDescriptorW` format identifier. **Recommendations** Update RustDesk to version 1.5.0 or later.